minor styling
add access control check
errata
try different request methods in routing
login dialog and processor
logout with csrf token
pair of methods renamed
set valid password to demo sql